CVE-2005-3630

Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2005-12-31

Last modified

2024-09-17

Affected products

• Fedora Core (Redhat)

References

• http://directory.fedora.redhat.com/wiki/FDS10Announcement
• http://secunia.com/advisories/18939
• http://www.securityfocus.com/bid/16729
• https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837